Ask Different is a question and answer site for power users of Apple hardware and software. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have a Mac mini running OS X 10.7 Server which has a number of shared folders/drives using AFP. We have a user account called fcp setup as sharing only which coworkers use to access the shared files.

Whenever a coworker clicks on the machine in finder we get prompted for a Kerberos password:

Keberos popup

We can get around this simply by clicking cancel (and we are then presented with the classic login window), but it confuses people.

How can I disable single signon/kerberos? (or alternatively, would it just be better to configure it properly? and if so what are the benifits since we only use filesharing?)

I assume this is something that comes activated with server because I dont remember anyone ever 'turning it on'

share|improve this question
up vote 1 down vote accepted

To disable Kerberos, open Terminal at Mac mini and enter the following command:

sudo sso_util remove -k -a username -p password -r YOUR.KERBEROS.REALM

Replace username, password with the user name and password of the Open Directory administrator (user/password with admin rights on Mac mini). It seems that YOUR.KERBEROS.REALM is "LKDC".

The Open Directory Overview pane of Server Admin (at Mac mini) should show the Kerberos service status as stopped.


share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.